Manifest

$ rpki-client -vvf rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
File:                     7DNNDzoYvgAht7joQih2Qayxcxo.mft (raw, json)
Hash identifier:          r87V5WmtrJYLGol8o44/6VfT30fF/SSWVRjgKMLZBmU=
Subject key identifier:   71:F5:B4:64:49:5A:84:C9:A2:45:A4:77:53:0A:BB:AA:CB:B1:EF:2D
Authority key identifier: EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A
Certificate issuer:       /CN=ec334d0f3a18be0021b7b8e842287641acb1731a
Certificate serial:       0194BC3BB3733E20BDE8A61F520E826C18AA
Authority info access:    rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
Subject info access:      rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
Manifest number:          0557
Signing time:             Fri 31 Jan 2025 12:00:06 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:06 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:06 +0000
Files and hashes:         1: 7DNNDzoYvgAht7joQih2Qayxcxo.crl (hash: 4p/5mgge2ANy7Mwi8wYSe5DdhgaQRuqED1RxSflpdIk=)
                          2: KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer (hash: kqge/YtVSwB1vG/K8WzzD0FyvA0mzz5CXCeU4Dw76+M=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3b:b3:73:3e:20:bd:e8:a6:1f:52:0e:82:6c:18:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec334d0f3a18be0021b7b8e842287641acb1731a
        Validity
            Not Before: Jan 31 12:00:06 2025 GMT
            Not After : Feb  1 12:00:06 2025 GMT
        Subject: CN=71f5b464495a84c9a245a477530abbaacbb1ef2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:55:24:7d:ea:67:1c:e4:1b:53:11:41:c2:da:
                    1f:51:3c:c7:af:c5:d3:c7:51:82:8a:5c:16:d7:24:
                    36:99:6a:a6:1a:6a:b6:d1:4e:4b:05:45:69:61:37:
                    f5:70:f1:0d:3a:59:44:03:86:61:34:44:cb:d9:10:
                    df:9b:07:9e:6b:c0:03:e4:aa:4c:36:96:67:4c:09:
                    5f:f3:c1:45:3f:87:c6:f1:fe:f0:ec:a1:22:55:85:
                    b1:49:b8:cd:33:34:27:bc:3f:9a:86:df:30:73:f1:
                    6d:15:68:91:a3:90:b0:3c:f1:c2:8e:4e:98:62:31:
                    f6:96:28:5e:f5:c0:7e:97:3f:07:5d:0e:6e:6f:e8:
                    a4:00:ae:0b:41:d3:2d:35:8f:32:12:fc:a9:ca:b2:
                    53:cc:6d:71:5e:a5:e3:17:54:be:95:72:a7:ed:56:
                    cb:5e:45:68:4d:fe:d5:7d:fd:5f:45:81:dd:58:93:
                    04:88:9e:20:25:d1:1b:29:78:73:6f:ef:33:d2:21:
                    b5:4d:a5:df:c4:de:02:f9:16:93:06:58:c8:b8:57:
                    05:69:b5:74:0f:bc:b7:af:6d:74:17:3c:0b:5e:3c:
                    2b:03:22:1b:ee:2d:e4:34:e2:16:c5:0c:c7:ee:e8:
                    18:6e:8f:a9:7f:a7:49:d5:02:f2:1a:6c:26:ba:2b:
                    63:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:F5:B4:64:49:5A:84:C9:A2:45:A4:77:53:0A:BB:AA:CB:B1:EF:2D
            X509v3 Authority Key Identifier:
                keyid:EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:88:b6:55:63:b3:77:f8:23:4e:e5:2a:4e:a6:27:13:54:86:
         89:4a:ad:47:f2:7f:a5:12:d0:99:a1:70:0d:9d:40:c3:01:b7:
         8a:03:ad:31:63:80:85:e8:c0:44:fe:04:7b:c1:55:47:f4:09:
         cc:d4:d3:b4:c7:de:3d:62:b6:f3:11:ce:de:a9:19:40:ff:f7:
         2a:69:da:58:2c:53:6c:6a:59:04:9c:64:cf:69:64:46:1b:a8:
         74:10:b8:57:2d:90:9e:64:a6:b7:b6:43:ab:eb:0f:73:6c:1a:
         b8:95:84:a3:7b:d6:90:55:a9:d8:39:57:b7:f2:3b:86:3b:b8:
         df:bd:be:cc:62:62:c8:c9:ca:23:00:52:d4:1d:b4:6a:b4:dd:
         e3:37:87:4f:ab:48:f1:df:ae:de:f5:9f:24:25:2f:b5:c2:04:
         a8:41:51:74:70:bd:c7:b2:7d:27:87:f4:ba:c3:fe:8f:15:35:
         46:de:cc:17:e0:36:38:92:82:db:99:bf:51:7b:d2:cd:7c:1d:
         fa:8c:9c:d3:20:8f:a0:8a:bd:60:93:78:a8:ab:80:e5:21:49:
         f4:99:2d:23:d1:74:04:54:1a:b4:66:d9:0b:b3:76:94:bb:f0:
         11:66:73:c7:fb:1b:c2:17:48:d4:e9:a0:45:30:4b:d0:db:7a:
         6b:ca:b8:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:02:54 2025 by rpki-client